Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/K6v2Q8STFMabY8DkPtoWDLZYF0w.roa
File: K6v2Q8STFMabY8DkPtoWDLZYF0w.roa (raw, json)
Hash identifier: LMKDC7wtB6T1Z3vo6Fdd/ZHviL0T2JdJEkfHLAdWyAE=
Subject key identifier: 2B:AB:F6:43:C4:93:14:C6:9B:63:C0:E4:3E:DA:16:0C:B6:58:17:4C
Certificate issuer: /CN=73e373fee780eeab2a90422d0ad514e084a8d611
Certificate serial: 01856D787662E8F9002780E45219D1FD4D9D
Authority key identifier: 73:E3:73:FE:E7:80:EE:AB:2A:90:42:2D:0A:D5:14:E0:84:A8:D6:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c-Nz_ueA7qsqkEItCtUU4ISo1hE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/K6v2Q8STFMabY8DkPtoWDLZYF0w.roa
Signing time: Sun 01 Jan 2023 13:14:49 +0000
ROA not before: Sun 01 Jan 2023 13:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34442
IP address blocks: 46.232.192.0/21 maxlen: 24
195.8.116.0/24 maxlen: 24
80.77.240.0/20 maxlen: 24
77.246.16.0/20 maxlen: 24
2a00:1990::/32 maxlen: 64
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:78:76:62:e8:f9:00:27:80:e4:52:19:d1:fd:4d:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73e373fee780eeab2a90422d0ad514e084a8d611
Validity
Not Before: Jan 1 13:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2babf643c49314c69b63c0e43eda160cb658174c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6a:16:d3:b5:98:20:47:5f:c9:82:a2:8e:85:
f3:dd:1e:7b:c3:da:e1:c4:21:83:cb:93:85:2e:99:
df:7a:dd:c7:f4:03:ac:05:a3:32:22:4e:23:8e:c4:
c7:ed:af:44:98:0d:9e:36:cc:9b:69:46:be:64:6c:
db:ac:7f:c5:66:b4:53:25:b5:11:c1:ba:4c:51:85:
6a:8e:4f:2e:6f:02:eb:b1:48:dc:e6:b8:c7:66:bf:
ea:f4:cf:d9:36:b0:a8:3c:a9:cb:70:e4:65:9c:f5:
cf:5b:dd:91:d2:a9:d8:19:e7:a0:1d:80:3b:6b:e9:
39:9b:e7:da:dc:ee:19:98:49:0a:48:1c:4a:89:eb:
3f:db:cb:15:4d:77:a5:75:4f:a2:69:db:c2:3e:e6:
c2:6c:0c:18:a4:56:f5:44:e4:ff:6f:37:93:ac:0f:
25:99:c3:48:86:df:ce:42:eb:a9:72:62:eb:56:93:
e2:c2:39:66:e5:45:9e:38:ec:e6:32:ca:2b:9c:7c:
8d:fa:d7:7d:c0:72:3e:cd:4d:d4:97:41:14:89:ac:
5e:87:5e:48:5e:08:4d:0f:db:c3:18:78:b4:13:dd:
e1:95:07:e0:1a:3a:c6:ec:d5:b0:ff:d4:18:b3:6f:
24:8a:17:68:d0:73:49:01:8e:56:e6:0e:82:cc:3c:
17:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:AB:F6:43:C4:93:14:C6:9B:63:C0:E4:3E:DA:16:0C:B6:58:17:4C
X509v3 Authority Key Identifier:
keyid:73:E3:73:FE:E7:80:EE:AB:2A:90:42:2D:0A:D5:14:E0:84:A8:D6:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c-Nz_ueA7qsqkEItCtUU4ISo1hE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/K6v2Q8STFMabY8DkPtoWDLZYF0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/c-Nz_ueA7qsqkEItCtUU4ISo1hE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.232.192.0/21
77.246.16.0/20
80.77.240.0/20
195.8.116.0/24
IPv6:
2a00:1990::/32
Signature Algorithm: sha256WithRSAEncryption
09:eb:d7:14:1b:98:0b:6e:06:2f:fd:45:64:1d:03:08:c2:3c:
3c:9a:1d:8b:d0:26:87:5a:9f:c8:56:f3:fd:d2:8f:91:c7:29:
76:a4:72:12:fb:ec:a8:44:1b:d9:ae:06:a7:02:07:ad:b3:89:
f9:6d:a4:f5:fc:66:06:97:fd:24:b4:86:a3:41:60:59:35:97:
04:d0:8b:37:f6:ed:9d:34:11:5f:f7:00:6f:68:5a:e4:fa:69:
13:14:af:a3:2f:e1:8d:ab:b5:47:c7:d1:58:cc:3f:48:f5:db:
fe:19:eb:08:6f:b4:f4:d0:d3:40:56:3c:01:95:e6:b9:e5:bc:
ad:eb:61:f5:87:5a:f7:18:45:e9:f1:d7:48:b8:d6:ed:b8:0c:
b2:3f:98:7c:12:71:94:f8:93:c5:8a:50:73:bc:1c:ac:e3:a1:
36:ef:fb:02:38:51:22:f2:f8:a8:2a:11:2f:b3:a3:27:8f:dc:
d8:b2:00:27:78:bc:d7:85:8e:24:af:1c:3c:73:97:63:61:fe:
f8:74:0f:b5:80:f4:86:8e:e1:9b:cf:59:75:9b:0f:3c:80:44:
00:f1:c2:77:7d:bc:71:bd:6e:46:7c:1a:e4:a7:49:66:62:03:
d9:7f:bc:86:47:64:ab:90:af:7f:cd:d2:a9:40:6e:9c:c3:07:
9a:99:b2:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:53 2024 by rpki-client on console-ams.rpki-client.org